Aerospike Server Community Edition 7.2.0.20
Security fixes
AER-6925
(CDT) CVE-2026-PENDING Fixed a rare crash from an out-of-bounds read when comparing msgpack integers.
Editions affected: Enterprise, Federal & Community
AER-6926
(KVS) CVE-2026-55749 Fixed a memory leak when a proxy target received malformed or oversized requests.
Editions affected: Enterprise, Federal & Community
AER-6930
(CDT) CVE-2026-55753 Fixed list or map values in a filter expression bypassing validation.
Editions affected: Enterprise, Federal & Community
Bug fixes
AER-6921
(KVS) Fix use_mounts memory leak on xmem pmem initialization error paths.
Editions affected: Enterprise, Federal & Community
AER-6923
(MEMORY) Restrict jem-stats output file path to prevent arbitrary file writes.
Editions affected: Enterprise, Federal & Community
AER-6924
(CDT) Fixed out-of-bounds read when parsing crafted truncated msgpack wire data.
Editions affected: Enterprise, Federal & Community
AER-6929
(XDR) Fix unbounded stack growth when retrieving datacenter state.
Editions affected: Enterprise & Federal Only